Phishers set their sights on the Vercel web hosting

Earlier we covered how attackers massively deployed phishing pages via the Firebase. Imagine combining mass deployment with GenAI — that gives you the Vercel platform, already being used in attacks according to Cofense.

Vercel makes it possible to generate web pages that mimic well-known companies and deploy them directly on the platform. The cloud service lets attackers avoid maintaining their own infrastructure, while GenAI continuously adapts and improves page quality with each prompt. Integrations with external services are supported — for example,via the Telegram API: this enables a chatbot that notifies attackers when credentials are entered on phishing pages.

As a result, Vercel now contains some of the functions typical of phishing kits. This effectively turns phishing into a low-effort workflow, where attackers no longer require their own infrastructure or deep technical expertise, making even sophisticated targeted attacks more accessible.